JP2018120354A - Determination program, determination method and determination apparatus - Google Patents

Abstract

PROBLEM TO BE SOLVED: To achieve an object in one aspect for making it possible to distinguish whether or not a process is generated by server software installed in a virtual machine.SOLUTION: A computer executes a determining process as to whether a specific process among a plurality of processes operating in a virtual machine is a process generated by server software or a process generated by software other than the server software on the basis of the number of connections established for the virtual machine and the number of child processes or threads generated by the specific process. When it is determined that the specific process is a process generated by the server software, the computer is made to execute the determination process on a process other than the specific process on the basis of information indicating a relationship between the plurality of processes.SELECTED DRAWING: Figure 10

Description

  The present invention relates to a determination program, a determination method, and a determination apparatus.

  In response to the request received from the user's terminal device, the information processing system that extracts data and processes the data and transmits the processing result as a response to the terminal device that transmitted the request is transmitted.

  FIG. 1 is an example of the information processing system described above, and is called, for example, a three-tier system. In the example of FIG. 1, the terminal device 1 transmits a request to the information processing system 10. In the information processing system 10, the Web server 11 receives the request and transmits the content of the request argument to the Application (AP) server 12. When access to the data stored in the database is required, the AP server 12 generates a query statement corresponding to the content of the received argument, and transmits the generated query statement to the Database (DB) server 13. Then, the AP server 12 executes the application using the data extracted from the database by the DB server 13 as input data, and transmits the processing result of the application to the Web server 11. The Web server 11 transmits the received processing result of the application to the terminal device 1 as a response to the request. The above is an example of processing in a three-tier system.

  A plurality of information processing systems may be constructed using one or a plurality of information processing apparatuses. For example, as shown in FIG. 1, three information processing systems 10, 20, and 30 are constructed in an environment such as a data center including one or a plurality of information processing apparatuses. Similar to the information processing system 10, the information processing system 20 includes a Web server 21, an AP server 22, and a DB server 23, and executes processing according to a request transmitted by the terminal device 2. Similarly to the information processing system 10, the information processing system 30 includes a web server 31, an AP server 32, and a DB server 33, and executes processing according to a request transmitted by the terminal device 3. Each of the information processing systems 10, 20, and 30 may have a different user or system type (collection search system, in-house personnel information management system, etc.).

  Each server such as a Web server, an AP server, and a DB server shown in FIG. 1 is a single virtual machine (virtual machine, virtual machine, VM). In other words, each server such as a Web server, an AP server, and a DB server shown in FIG. 1 is a virtual machine in which server software is introduced. For example, when server virtualization technology is applied, the number of VMs as a server and the number of information processing apparatuses as a physical machine do not necessarily match.

Special table 2013-543171 gazette

  In addition to unique software corresponding to each server type, software such as anti-virus software, which is necessary regardless of the server type, is introduced to each VM as a server. Therefore, when the VM operates, a process of unique software (server software) corresponding to each server type, other software processes, a process executed by the Operating System (OS), and the like operate in the VM. It will be.

  By the way, apart from the server virtualization technique described above, there is a technique for operating a plurality of servers with one VM, and is called, for example, a container technique or a virtual container (hereinafter referred to as a container technique).

  In order to improve cost performance, it is required to suppress excess or deficiency of VM resources (such as arithmetic processing capacity and memory amount) when a plurality of servers are operated by one VM. Hereinafter, operating a plurality of servers with a single VM may be described as “aggregating” the servers. Therefore, for example, the total amount of resources used when a plurality of servers subject to server consolidation are operated by individual VMs is added, and the maximum number of servers is selected within a range where the combined usage does not exceed the resource upper limit of one VM. It is possible to consolidate to one VM.

  However, in the server aggregation described above, there is a possibility that the combined usage amount is estimated excessively than the actual usage amount. The above-mentioned combined usage amount is estimated that the consumption of resources by processes other than the specific software process corresponding to the type of server is generated by the number of servers to be aggregated. However, when the servers are actually aggregated, the resource consumption by processes other than the unique software process is considered to depend on the number of VMs, not the number of servers. That is, it is considered that the resource consumption by processes other than the unique software process is equivalent to one server regardless of the number of servers. In other words, if the number of servers to be aggregated is n, the above-mentioned combined usage amount is considered to be an excess of approximately (n-1) processes other than the specific software processes. It is done.

  In order to suppress the excessive estimation described above, when one server operates with one VM, whether the process operating with the VM is a specific software process or a process other than the specific software process. It is necessary to distinguish whether there is.

  In one aspect, an object is to make it possible to distinguish whether each of a plurality of processes operating in a virtual machine is a process generated by server software installed in the virtual machine.

  In one aspect, a process in which a specific process among a plurality of processes operating in a virtual machine in which server software is installed in a computer is generated by the server software and software other than the server software is generated. Is determined based on the number of connections established for the virtual machine and the number of child processes or threads generated by the specific process, and the specific process is generated by the server software. If the process is determined to be a process to be executed, the server software generates the plurality of processes other than the specific process based on the information indicating the relationship between the plurality of processes stored in the storage unit. Other than the process and the server software Determining which one of the processes generated by the software, to execute the process.

  In one aspect, it is possible to distinguish whether or not each of a plurality of processes operating on the virtual machine is a process generated by server software installed in the virtual machine.

An overview of the information processing systems 10, 20, and 30 is shown. An overview of this example is shown. 2 is a functional block diagram illustrating a software configuration of the aggregation control device 300. FIG. The functional block diagram of the memory | storage part 220 is shown. An example of information stored in the configuration information storage unit 223 is shown. An example of information stored in the network information storage unit 222 is shown. An example of information stored in the operation information storage unit 221 is shown. An example of information stored in the directory information storage unit 224 is shown. An example of information stored in the disk access information storage unit 225 is shown. An example of the information memorize | stored in the transmission / reception amount information storage part 226 is shown. The flowchart which shows the procedure of the process determination process in a present Example is shown. The flowchart explaining the detail of the process of step S1003 is shown. An example of the communication setting file of VM is shown. The flowchart explaining the detail of the process of step S1004 is shown. The flowchart explaining the detail of the process of step S1004 is shown. The flowchart explaining the detail of the process of step S1005 is shown. The flowchart explaining the detail of the process of step S1006 is shown. An example of the bottleneck determination information storage unit 227 is shown. The image which compared the aggregation process at the time of using the determination result of the server specific process by a present Example, and the above-mentioned excessive estimation (comparative example) is shown. 2 shows an example of a hardware configuration of an aggregation control apparatus 300.

  Embodiments for carrying out the present invention will be described with reference to the drawings.

[Overview]
FIG. 2 is an overview of this embodiment. The system 100 according to the present embodiment includes an information processing device 200, an aggregation control device 300, and a terminal device 400.

  A plurality of VMs operate on the information processing apparatus 200, and each VM operates as a server of any type. Although FIG. 2 shows an aspect where the information processing apparatus is one, a plurality of information processing apparatuses 200 may be provided. Further, for example, the information processing apparatus 200 of FIG. 2 may be a data center including a plurality of information processing apparatuses.

  The aggregation control device 300 is communicably connected to the information processing device 200 via a wired or wireless network 500. The aggregation control device 300 executes the identification of the resource usage for each process and the determination as to whether or not the process is a unique software process corresponding to the server type for the VM operating on the information processing device 200. . In the following description, a unique software process corresponding to a server type may be referred to as a “server-specific process” for convenience. The server specific process can also be said to be a process of server software in the VM, a process generated by the server software, or a process directly related to server operation.

  The terminal device 400 is communicably connected to the information processing device 200 via the network 500. The terminal device 400 transmits a request to an information processing system (such as the above-described three-tier system) configured by a VM operating on the information processing device 200, and receives a response to the request. In the following description, unless otherwise noted, when simply described as VM, it means a VM that operates on the information processing apparatus 200 and one server is installed on the own apparatus.

[Functional configuration of central control apparatus 300]
FIG. 3A is a functional block diagram illustrating the software configuration of the aggregation control apparatus 300. The aggregation control apparatus 300 includes an input unit 201, a display unit 202, a communication unit 203, a processing unit 210, and a storage unit 220.

  The input unit 201 receives input of information to the aggregation control device 300.

  The display unit 202 outputs information such as whether or not server aggregation described later is possible.

  The communication unit 203 serves as an interface when the aggregation control device 300 communicates with other devices.

  The processing unit 210 includes an operation monitoring unit 211, a directory information acquisition unit 212, a determination unit 213, and an aggregation control unit 214.

  The operation monitoring unit 211 monitors the operation of the VM that operates on the information processing apparatus 200 and collects operation information. Details of the operation information collected by the operation monitoring unit 211 will be described later.

  The directory information acquisition unit 212 acquires information related to an execution file of a process operating on the VM. The directory information acquisition unit 212 stores the acquired information in, for example, a directory information storage unit 224 described later.

  The determination unit 213 determines whether the process is a server specific process for the process operating in the VM. In the present embodiment, in the following description, processing for determining whether or not a process is a server specific process is referred to as “process determination processing”.

  More specifically, in this embodiment, the determination unit 213 includes a first determination unit 213-1, a second determination unit 213-2, and a third determination unit 213-3. The first determination unit 213-1 performs process determination processing on the VM process on which the Web server operates. The second determination unit 213-2 executes process determination processing for the VM process in which the AP server operates. The third determination unit 213-3 executes process determination processing for the VM process in which the DB server operates. However, this embodiment is based on the assumption that the server is any one of a Web server, an AP server, and a DB server. Therefore, the type of the server to be determined and the specific configuration of the embodiment according to the server type are not limited to the present embodiment.

  Based on the determination result of the determination unit 213, the aggregation control unit 214 determines whether or not to consolidate servers and the combination of servers to be aggregated. In addition, the aggregation control unit 214 can transmit an instruction to execute server aggregation to the information processing apparatus 200 based on the determined combination of servers.

  FIG. 3B is a functional block diagram of the storage unit 220 shown in FIG. 3A. As shown in FIG. 3B, for example, the storage unit 220 includes an operation information storage unit 221, a network information storage unit 222, a configuration information storage unit 223, a directory information storage unit 224, a disk access information storage unit 225, and a transmission / reception amount information storage unit. 226, a bottleneck determination information storage unit 227 is provided. Details of each will be described later along with specific examples of stored information.

  Before describing the process determination process in the present embodiment, collection of information used for the process determination process will be described.

[Configuration Information Storage Unit 223]
FIG. 4 is a diagram illustrating an example of information stored in the configuration information storage unit 223. The configuration information storage unit 223 stores, for example, information such as the OS type 2231, the Internet Protocol (IP) address 2232, the host name 2233, and the server type 2234 shown in FIG. Information stored in the configuration information storage unit 223 is information on each VM operating on the information processing apparatus 200. In the present embodiment, the information stored in the configuration information storage unit 223 may be held in the storage unit of its own device by the aggregation control device 300. Alternatively, it may be stored in a configuration information database (Configuration Management Database, CMDB) that can be accessed by the aggregation control device 300 and is outside the own device.

  The OS type 2231 is information indicating what the OS of each VM is. In FIG. 4, “OS-A 64 bits”, “OS-B 32 bits”, and “OS-B 64 bits” are described. However, the data format shown in FIG. 4 is merely an example, and the specific data format can be appropriately changed as long as it is information that can identify what the OS of each VM is.

  The IP address 2232 is information indicating the IP address assigned to the VM. In FIG. 4, “IP_X1”, “IP_X2”, and “IP_X3” are described for the sake of explanation, but the actual data format is, for example, compliant with IPv4 (version 4) or IPv6 (version 6).

  The host name 2233 is information indicating the host name (computer name) assigned to each VM. The host name 2233 may not be limited to the mode illustrated in FIG. 4 as long as each VM can be uniquely identified.

  The server type 2234 is information indicating the type of server operating in each VM. In this embodiment, the server type can also be said to be the type of business system installed in each VM. In this embodiment, Web server, AP server, and DB server are listed as server types. FIG. 4 shows VM information for one Web server, one AP server, and one DB server, for a total of three.

[Network information storage unit 222]
FIG. 5 is a diagram illustrating an example of information stored in the network information storage unit 222. The network information storage unit 222 stores, for example, local socket information 2221, remote socket information 2222, status information 2223, and process identifier (PID) 2224 shown in FIG. The information stored in the network information storage unit 222 is information regarding the state of interprocess communication of VMs operating on the information processing apparatus 200. For example, by using a netstat command or the like, the aggregation control apparatus 300 performs information processing. It can be collected from the device 200. Specifically, for example, when the aggregation control apparatus 300 instructs the VM operating on the information processing apparatus 200 to execute the netstat command, information about the VM that has received the instruction is acquired. Then, the aggregation control device 300 can acquire information by transmitting the information acquired by the VM that has received the instruction to the aggregation control device 300. In the following description, the interprocess communication may be described as a connection.

  The local side socket information 2221 is information including a host name and a port number on the local side in the connection. Here, the local side refers to the VM side from which information has been acquired. The local socket information 2221 may be information including the IP address of the host, for example, instead of the host name. The local side socket information 2221 shown in FIG. 5 has a data format in which a host name and a port number are separated by “: (colon)”. If the host name and the port number in the data can be distinguished, the local socket information 2221 shown in FIG. A data format different from 5 may be used. In FIG. 5, the port number is described as “PORT_ # 113”, for example, for the sake of explanation, but the actual port number is a numerical value of 16 bits (0 to 65535), for example.

  The remote-side socket information 2222 is information including the remote-side host name and port number in the connection. Here, the remote side refers to the VM side of the communication partner of the VM that acquired the information. Whether or not a specific data format or modification of the remote socket information 2222 is adopted is the same as that of the local socket information 2221.

  The status information 2223 is information indicating the status of interprocess communication. In FIG. 5, for example, a state “LISTEN” and a state “ESTABISHED” are shown. “LISTEN” is waiting for a connection request, that is, the connection is not established. “ESTABLISHED” indicates that a connection is established.

  The PID 2224 is identification information for identifying the process to which the local socket indicated by the local socket information 2221 belongs. In FIG. 5, for example, “P_X110” is described, but specifically, the PID is, for example, a number (numerical value) uniquely identifying a process.

  With the information shown in FIG. 5, the state of the connection between processes at the timing when the information is acquired can be specified. For example, taking the row 222- # 1 of FIG. 5 as an example, the host name and port number of the local socket are “HOST_X1: PORT_ # 110”, and the host name and port number of the remote socket are “HOST_U1: PORT_ # U1”. The connection is not established (LISTEN), and the PID of the process corresponding to the local socket is specified as “P_X110”. Further, for example, taking the row 222- # 2 of FIG. 5 as an example, the host name and port number of the local socket are “HOST_X1: PORT_ # 111”, and the host name and port number of the remote socket are “HOST_U2: PORT_ “# U2”, the connection is in an established state (ESTABLISHED), and the PID of the process corresponding to the local socket is specified as “P_X111”.

[Operation Information Storage Unit 221]
FIG. 6 is a diagram illustrating an example of information stored in the operation information storage unit 221. The operation information storage unit 221 includes, for example, a PID 2211, a parent process identifier (PPID) 2212, a central processing unit (CPU) usage rate 2213, a real memory usage amount 2214, a virtual memory usage amount 2215, a thread number 2216, shown in FIG. Executable file information 2217 is stored. The information illustrated in FIG. 6 includes information regarding each process operating in the VM, and information indicating the amount of resources used by each process. The information shown in FIG. 6 can be collected from the information processing apparatus 200 by the aggregation control apparatus 300 by using, for example, a ps command. Specifically, for example, when the aggregation control apparatus 300 instructs the VM operating on the information processing apparatus 200 to execute the ps command, information on the received VM is acquired. Then, the aggregation control device 300 can acquire information by transmitting the information acquired by the VM that has received the instruction to the aggregation control device 300.

  The PID 2211 is identification information for identifying a process, and may be in the same mode as the PID 2224 in FIG. 5, for example.

  The PPID 2212 is information indicating identification information of a parent process of the process indicated by the PID 2211. That is, the process indicated by PID 2211 is a child process of the process indicated by PPID 2212.

  The CPU usage rate 2213 indicates the CPU usage rate for each process for the CPU resource allocated to the VM.

  The real memory usage 2214 indicates the memory capacity (real memory capacity) used by each process. The virtual memory usage 2215 indicates the virtual memory capacity used by each process.

  The number of threads 2216 is information indicating the number of threads generated by the process.

  The execution file information 2217 is information for specifying an execution file of each process. In the present embodiment, the execution file information 2217 may be, for example, the execution file name or execution command name of each process. In the mode of FIG. 6, the executable file name of each process is stored in the value of the executable file information 2217.

[Directory information storage unit 224]
FIG. 7 is a diagram illustrating an example of information stored in the directory information storage unit 224. The directory information storage unit 224 stores, for example, executable file information 2241 and path information 2242 shown in FIG.

  The execution file information 2241 is information for specifying an execution file, and may be in the same mode as the execution file information 2217 in FIG. 6, for example.

  The path information 2242 is information indicating the full path of the directory in which the execution file indicated by the execution file information 2241 is stored.

  The information shown in FIG. 7 can be collected from the information processing apparatus 200 by the directory information acquisition unit 212 of the aggregation control apparatus 300 by using, for example, an ls (LS) command or the like. Specifically, for example, when the aggregation control apparatus 300 instructs the VM operating on the information processing apparatus 200 to execute the ls command, information about the VM that has received the instruction is acquired. Then, the aggregation control device 300 can acquire information by transmitting the information acquired by the VM that has received the instruction to the aggregation control device 300.

[Disk access information storage unit 225]
FIG. 8 is a diagram illustrating an example of information stored in the disk access information storage unit 225. The disk access information storage unit 225 stores information indicating an access status of each process, specifically, an access data amount to a storage area (storage area, disk area) allocated to the VM. For example, as shown in FIG. 8, the disk access information storage unit 225 stores a PID 2251, a read data amount 2252, and a write data amount 2253.

  The PID 2251 is identification information for identifying a process, and may be in the same mode as the PID 2224 in FIG. 5, for example.

  The read data amount 2252 indicates the data amount per unit time read from the storage area allocated to the VM by the process.

  The write data amount 2253 indicates the write data amount per unit time for the storage area allocated to the VM by the process.

  The information shown in FIG. 8 can be collected from the information processing apparatus 200 by the aggregation control apparatus 300 by using, for example, an itop command or the like. Specifically, for example, when the aggregation control apparatus 300 instructs the VM operating on the information processing apparatus 200 to execute an iotop command, information about the VM that has received the instruction is acquired. Then, the aggregation control device 300 can acquire information by transmitting the information acquired by the VM that has received the instruction to the aggregation control device 300.

[Transmission / reception amount information storage unit 226]
FIG. 9 is a diagram illustrating an example of information stored in the transmission / reception amount information storage unit 226. The transmission / reception amount information storage unit 226 stores information for specifying the data transmission / reception amount of the Web server for the terminal device 400. The transmission / reception amount information storage unit 226 stores, for example, a network interface 2261, a transmission data amount 2262, and a reception data amount 2263.

  The network interface 2261 is identification information of a network interface card (NIC) of the web server.

  The transmission data amount 2262 is information indicating the data transmission amount per unit time from the Web server to the terminal device 400.

  The reception data amount 2263 is information indicating the data reception amount per unit time received by the Web server from the terminal device 400.

  The information shown in FIG. 9 can be collected from the information processing apparatus 200 by the aggregation control apparatus 300 by using, for example, an ifconfig command. Specifically, for example, when the aggregation control device 300 instructs the VM of the Web server operating on the information processing device 200 to execute an ifconfig command, information about the VM that has received the instruction is acquired. The Then, the aggregation control device 300 can acquire information by transmitting the information acquired by the VM that has received the instruction to the aggregation control device 300.

  The information stored in each of the operation information storage unit 221, the network information storage unit 222, the disk access information storage unit 225, and the transmission / reception amount information storage unit 226 is acquired by the aggregation control device 300 a plurality of times at a predetermined cycle, for example. The information stored in the configuration information storage unit 223 and the directory information 224 may be acquired once at a certain timing, for example. This is because the information stored in the configuration information storage unit 223 and the directory information 224 is information that does not change unless a system configuration change occurs. However, the information stored in the configuration information storage unit 223 and the directory information 224 may be, for example, information acquired at the latest timing among the plurality of different timings.

[Details of judgment processing]
Details of the process determination processing in this embodiment will be described.

  FIG. 10 is a flowchart showing the procedure of the process determination process in the present embodiment.

  First, the determination unit 213 selects one VM from the VMs whose information is stored in the configuration information storage unit 223 and sets it as a process determination process target (step S1001).

  Next, the determination unit 213 determines the type of server that operates in the VM selected in step S1001 (step S1002). For example, the determination unit 213 may determine the server type by referring to the server type 2234 associated with the VM host name 2233 selected in Step S1001 in the configuration information storage unit 223. When the server type is a Web server, the first determination unit 213-1 executes the first determination process (step S1003). When the server type is AP server, the second determination unit 213-2 executes the second determination process (step S1004) and the third determination process (step S1005). When the server type is a DB server, the third determination unit 213-3 executes a fourth determination process (step S1006). Each of steps S1003 to S1006 is processing for determining whether or not the VM process is a server-specific process. Details of steps S1003 to S1006 will be described later.

  After any one of steps S1003 to S1006 is executed, the determination unit 213 determines whether all VMs have been selected as targets in step S1001 (step S1007). Here, all VMs may be all VMs whose information is stored in the configuration information storage unit 223, or are specified from all VMs whose information is stored in the configuration information storage unit 223. Or some VMs. If it is determined that not all VMs have been selected (step S1007, NO), the process returns to step S1001. On the other hand, when it is determined that all the VMs have been selected (step S1007, YES), the series of processing illustrated in FIG. 10 ends.

  Hereinafter, the details of the processes executed in steps S1003 to S1006 will be described. In the following description, details may be described with reference to FIGS. 5 and 6, but in the description, the information shown in FIGS. 5 and 6 is acquired at the same timing.

[Details of Step S1003]
FIG. 11 is a flowchart illustrating details of the process in step S1003 of FIG. In the present embodiment, the process of FIG. 11 is a process executed by the first determination unit 213-1 for a VM process whose server type is determined to be a Web server.

  First, the first determination unit 213-1 acquires the port number of the port used when the target VM (Web server) receives a request from the terminal device 400 (step S1101). The port number used when receiving the request is, for example, the port assigned to the transmission control protocol (TCP) communication whose service name is “http” or “https” in the communication setting file of the target VM. Number.

  FIG. 12 is a diagram illustrating an example of a VM communication setting file. In the communication setting file 1200 of FIG. 12, a service name is shown in an area 1201, and a port number and a communication protocol are shown in an area 1202.

  Returning to the description of FIG. 11, after step S1101, the first determination unit 213-1 identifies the number of established connections (step S1102). Here, the number of established connections can be specified based on information stored in the network information storage unit 222, for example. For example, the first determination unit 213-1 includes the port number acquired in step S1101 in the local socket information 2221, and identifies a connection corresponding to the condition in which the value of the status information 2223 is “ESTABLISHED”. Then, the first determination unit 213-1 identifies the total number of corresponding connections as the number of established connections. In this embodiment, it is assumed that the connections shown in the data rows 222- # 2, 222- # 3, and 222- # 4 in FIG. 5 correspond, and the number of established connections is 3.

  After the process of step S1102 ends, the first determination unit 213-1 identifies the number of child processes for the process selected in step S1102 (step S1103). The number of child processes may be, for example, the number of processes whose parent process is the process selected in step S1102 in the operation information acquired at a certain timing. Here, the first determination unit 213-1 stores the identification information (PPID) of the parent process and the number of identified child processes in association with each other. For example, if a process in the range of 221- # 1 shown in FIG. 6 is acquired as a Web server process, PPID = P_X110 with a child process number of 3, PPID = P_X120 with a child process number of 1, and a child process number of 1 PPID = P_X130 with PPID = P_X130 and the number of child processes of 1 is specified.

  The first determination unit 213-1 selects one parent process from the parent processes for which the number of child processes has been specified in step S1103 (step S1104).

  Then, the first determination unit 213-1 compares the number of established connections specified in step S1103 with the number of child processes of the parent process selected in step S1104. Then, the first determination unit 213-1 determines whether or not the number of established connections matches the number of child processes (step S1105).

  When it is determined that the number of established connections matches the number of child processes (YES in step S1105), the first determination unit 213-1 determines the parent process and the child process of the parent process selected in step S1104. It is determined that the process is a server-specific process (step S1106). On the other hand, when it is not determined that the number of established connections matches the number of child processes (NO in step S1105), the first determination unit 213-1 selects the parent process and the child process of the parent process selected in step S1104. Are not server specific processes (step S1107).

  For example, in the example of FIG. 6, the process with PPID = P_X110 has a child process number of 3 and matches the number of established connections of 3, so it is determined to be a server specific process. On the other hand, the process of PPID = P_X120, the process of PPID = P_X130, and the process of PPID = P_X140 are determined not to be server-specific processes because the number of child processes is 1 and does not match 3, which is the number of established connections. Is done.

  After step S1106 or S1107, the first determination unit 213-1 determines whether or not all parent processes have been selected in step S1104 (step S1108). If all the parent processes have not been selected (step S1108, NO), the process returns to step S1104, selects an unselected parent process, and repeats the processing of steps S1105 to S1108. On the other hand, when all parent processes are selected (step S1108, YES), the first determination unit 213-1 executes the process of step S1109.

  After the server specific process is specified by the processes of steps S1101 to S1108, the first determination unit 213-1 performs the additional specification process of the server specific process (step S1109).

  In step S1109, the first determination unit 213-1 identifies the directory in which the process execution file is stored for the identified server specific process. If a plurality of server-specific processes are specified by the processes in steps S1101 to S1108, the plurality of server-specific processes and child processes are targets of the process in step S1109. In order to specify the directory in which the execution file is stored, for example, the first determination unit 213-1 executes the execution indicated by the execution file information 2217 associated with the PID of the server-specific process in the operation information storage unit 221. Identify the file. Then, the first determination unit 213-1 refers to the directory information storage unit 224 and identifies a directory corresponding to the identified executable file. Specifically, in the directory information storage unit 224, the execution file is stored based on the full path of the execution file indicated in the path information 2242 associated with the specified execution file (value of the execution file information 2241). A directory is specified.

  Then, the first determination unit 213-1 determines the server specific process based on the positional relationship of the execution file storage positions in the directory. Specifically, the first determination unit 213-1 determines that the process corresponding to the specified directory and the execution file stored in the directory under the specified directory is also a server-specific process.

  For example, taking FIG. 6 and FIG. 7 as examples, the execution file name of the process of PPID = P_X110 determined to be a server-specific process in the above example is CMD_ # 1, and the full path of the execution file directory is “ / Opt / local / bin / CMD_ # 1 ". The execution file whose execution file name is CMD_ # 4 is stored in the same directory as the execution file whose execution file name is CMD_ # 1. The execution file whose execution file name is CMD_ # 5 is stored in a directory under the directory of the execution file whose execution file name is CMD_ # 1. The execution file whose execution file name is CMD_ # 6 is stored in a directory that is not the same as or subordinate to the directory of the execution file whose execution file name is CMD_ # 1. Therefore, the first determination unit 213-1 refers to the information in FIG. 6 and performs the process of PPID = P_X120 whose execution file name is CMD_ # 4 and the process of PPID = P_X130 whose execution file name is CMD_ # 5. Determine that it is a server-specific process. On the other hand, the first determination unit 213-1 determines that the process of PPID = P_X140 whose execution file name is CMD_ # 6 is not a server specific process. Note that the process of PPID = P_X120 and the process of PPID = P_X130 are processes that have not been determined to be server-specific processes in the examples described in the description of steps S1105 to S1107.

  The server specific process specified by the processing in step S1109 is a process generated by an execution file stored in the same directory as the execution file of the server specific process or a directory under the directory of the execution file of the server specific process. . Through the processing in step S1109, server processes can be extracted from processes that could not be specified in steps S1101 to S1108.

  After the process of step S1109 ends, the series of processes shown in FIG. 11 ends. In the above description, a series of processes based on the operation status of the process and the network status acquired at a certain timing has been described. However, when the operation status of the process and the network status are acquired at a plurality of timings (for example, periodically at a predetermined cycle), the process status and the network status at each timing are shown in FIG. A series of processes shown may be executed a plurality of times. Then, the first determination unit 213-1 identifies the determined process that is a server-specific process as a server-specific process more than a predetermined number of times (for example, once) in a plurality of executions, and determines that the process is a server-specific process It is also possible to determine that a process whose number of times is less than a predetermined number is not a server-specific process.

  When the Web server process (acceptance process) receives a request from the terminal device 400, a connection with the terminal device 400 is established for the process ("ESTABLISHED"), and a child process is generated. After the child process is generated, the processing corresponding to the request is taken over by the child process. Then, a connection with the terminal device 400 regarding the child process is established, and a connection with the terminal device 400 regarding the parent process is in a request waiting state (“LISTEN”). When the processing corresponding to the request is completed, the child process disappears, but the connection is maintained until the completion, that is, while the child process exists. Therefore, the number of connections established to the Web server is equal to the number of child processes of the Web server process (acceptance process). This characteristic can be used to identify a server specific process for the Web server. In the specifying method of this embodiment, the server specific process is specified by comparing the number of connections with the number of child processes. Therefore, for example, it is possible to determine that a process in which the resource usage is accidentally increased at the timing of receiving a request is not a server-specific process, so that the determination accuracy is improved.

  In addition, the execution file of the process that is a server specific process is stored in the directory of the execution file of the specified server specific process, although it cannot be specified by comparing the number of connections and the number of child processes. Therefore, it is possible to further improve the determination accuracy by specifying a process in which an execution file is stored in the same directory as the execution file of the specified server specific process or a subordinate directory as a server specific process. The process extracted here is, for example, a process for outputting a log or a process for collecting unnecessary resources, and is called a background process, for example.

[Details of Step S1004]
13 and 14 are flowcharts illustrating details of the process in step S1004 of FIG. In the present embodiment, the processes of FIGS. 13 and 14 are processes executed by the second determination unit 213-2 on the VM process whose server type is determined to be an AP server.

  First, the second determination unit 213-2 specifies a connection established with the Web server for the target VM (AP server) (step S1301). For example, the second determination unit 213-2 can identify the established connection based on the information stored in the network information storage unit 222 for each of the target VM and the VM of the Web server.

More specifically, for example, for the target VM (AP server), the second determination unit 213-2 establishes a connection in which the information stored in the network information storage unit 222 satisfies all of the following conditions using the established connection. Judge that there is.
Condition 1: The value of the local socket information 2221 (host name and port number) matches the value of the remote socket information 2222 of the VM of the Web server.
Condition 2: The value of the remote socket information 2222 matches the value of the local socket information 2221 of the VM of the Web server.
Condition 3: The state of the connection indicated in the state information 2223 is “ESTABLISHED”.

In addition to the above conditions 1 to 3, the following may be added as conditions.
Condition 4: The status of the connection indicated in the VM status information 2223 of the Web server is also “ESTABLISHED”.
Condition 5: The connection protocol is TCP.

  A specific example will be described with reference to FIG. For example, it is assumed that the connections indicated in the data rows 222- # 8 to 222- # 11 in FIG. 5 are specified as the AP server connection. In this case, the connection of the Web server indicated by the data rows 222- # 5 to 222- # 7 that satisfies the above conditions 1 to 3 for the connections of the data rows 222- # 9, 222- # 10, and 222- # 11 Exists. Accordingly, the connections in the data rows 222- # 9, 222- # 10, and 222- # 11 are identified as established connections for the AP server. In the example of FIG. 5, conditions 4 and 5 are satisfied in addition to conditions 1 to 3.

  After execution of step S1301, the second determination unit 213-2 specifies a corresponding process for each of the established connections specified in step S1301 (step S1302). Specifically, the second determination unit 213-2 identifies the process to which the local socket belongs for each of the established connections. In FIG. 5, the processes of PID = P_X211, P_X221, and P_X231 shown in the data rows 222- # 9, 222- # 10, and 222- # 11 are applicable.

  Furthermore, the second determination unit 213-2 specifies the parent process of each process specified in step S1302 (step S1303). It should be noted that the parent process specified here is intended only for processes that have established a connection with the Web server or are waiting for a connection from the Web server. For example, the process waiting for a connection from the Web server includes the host name of the Web server in the value of the remote socket information 2222 shown in FIG. 5 and the connection state indicated in the status information 2223 is “LISTEN”. Can be specified as a condition. In the present embodiment, the process of PPID = P_X210 is specified as the parent process from FIGS.

  The second determination unit 213-2 selects one process from the parent processes specified in step S1303 (step S1304).

  The second determination unit 213-2 identifies the number of established connections for each process selected in step S1304 (step S1305).

  For example, if the process selected in step S1304 is the parent process of PPID = P_X210, the number of established connections is 1 from FIG. 5 and FIG.

  The second determination unit 213-2 identifies the number of child processes for each of the processes selected in step S1304 (step S1306).

For example, if the process selected in step S1304 is a parent process with PPID = P_X210, the number of child processes is three from FIG.
The second determination unit 213-2 compares the number of established connections with the number of child processes for each process selected in step S1304. Then, the second determination unit 213-2 determines whether or not the number of child processes is greater than or equal to the number of established connections (step S1307).

  If it is determined that the number of child processes is greater than or equal to the number of established connections (YES in step S1307), the second determination unit 213-2 determines that the process selected in step S1304 is a server-specific process. (Step S1308). On the other hand, if it is determined that the number of child processes is not equal to or greater than the number of established connections (NO in step S1307), the second determination unit 213-2 determines that the process selected in step S1302 is not a server-specific process. Determination is made (step S1309).

  For example, if the process selected in step S1304 is a parent process of PPID = P_X210, the number of child processes is 3 and is 1 or more, which is the number of established connections, as illustrated above. The second determination unit 213-2 determines that the parent process (and its child processes) with PPID = P_X210 is a server-specific process.

  After finishing the process of step S1308 or step S1309, the second determination unit 213-2 determines whether all parent processes have been selected in step S1304 (step S1310). If it is determined that all parent processes have not been selected (step S1310, NO), the process returns to step S1304, and the second determination unit 213-2 selects one unselected process and repeats the process.

  When it is determined that all the parent processes have been selected (step S1310, YES), the second determination unit 213-2 executes an additional specifying process of the server specific process (step S1311). The process in step S1311 may be the same as the additional specifying process described as step S1109 in FIG.

  After step S1311, the series of processing shown in FIGS. 13 and 14 ends. In the above description, a series of processes based on the operation status of the process and the network status acquired at a certain timing has been described. However, when the process operation status and the network status are acquired at a plurality of timings (for example, periodically in a predetermined cycle), the process status and the network status at each timing are illustrated in FIG. A series of processes shown in FIG. 14 may be executed a plurality of times. Then, the second determination unit 213-2 identifies the determined process that is a server-specific process as a server-specific process at a predetermined number of times (for example, once) or more in a plurality of executions, and determines that the process is a server-specific process It is also possible to determine that a process whose number of times is less than a predetermined number is not a server-specific process.

[Details of Step S1005]
FIG. 15 is a flowchart illustrating details of the process in step S1005 of FIG.
In the present embodiment, the process of FIG. 15 is a process executed by the second determination unit 213-2 for a VM process whose server type is determined to be an AP server.

  First, the second determination unit 213-2 specifies a connection established with the Web server for the target VM (AP server) (step S1501). In addition, the second determination unit 213-2 specifies a corresponding process for each of the established connections specified in Step S1501 (Step S1502). For example, the processing in steps S1501 and S1502 may be the same processing as in steps S1301 and S1302 described above, or the processing results in steps S1301 and S1302 may be used. In the example of FIG. 6, processes with PID = P_X211, PID = P_X221, and PID = P_X231 are specified.

  Next, the second determination unit 213-2 specifies the number of established connections for each process specified in step S1502 (step S1503). In the example of FIG. 6, the number of established connections is 1 for each process of PID = P_X 211, PID = P_X 221, and PID = P_X 231.

  Then, the second determination unit 213-2 selects one process from the processes specified in step S1502 (step S1504), and executes the processes of steps S1505 to S1509 described later for the selected process.

  In step S1505, the second determination unit 213-2 identifies the number of process threads for the process selected in step S1504. The number of process threads refers to, for example, the value (numerical value) of the data row corresponding to the PID of the process selected in step S1504 in the information on the number of threads 2216 stored in the operation information storage unit 221 illustrated in FIG. Can be specified.

  After step S1505, the second determination unit 213-2 compares the number of established connections with the number of process threads for the process selected in step S1504. Then, the second determination unit 213-2 determines whether or not the number of threads is greater than the number of established connections (step S1506).

  When it is determined that the number of threads is larger than the number of established connections (YES in step S1506), the second determination unit 213-2 determines that the process selected in step S1504 is a server-specific process. (Step S1507). On the other hand, if it is determined that the number of child processes is not equal to or greater than the number of established connections (step S1506, NO), the second determination unit 213-2 determines that the process selected in step S1504 is not a server-specific process. Determination is made (step S1508).

  For example, in the example of FIG. 6, the number of threads of the process with PID = P_X 221 is 2, which is larger than 1, which is the number of established connections. Therefore, the second determination unit 213-2 determines that the process with PID = P_X221 is a server-specific process. On the other hand, each of the processes with PID = P_X211 and PID = P_X231 has a thread number of 1 and is not larger than 1, which is the number of established connections. Therefore, the second determination unit 213-2 determines that the process of PID = P_X211 and PID = P_X231 is not a server specific process.

  After completing the process of step S1507 or step S1508, the second determination unit 213-2 determines whether all processes have been selected in step S1504 (step S1509). If it is determined that all processes have not been selected (step S1509, NO), the process returns to step S1504, and the second determination unit 213-2 selects one unselected process and repeats the process.

  If it is determined that all the processes have been selected (step S1509, YES), the second determination unit 213-2 executes additional specific processing for the server-specific process (step S1510). The process in step S1510 may be the same as the additional specifying process described as step S1109 in FIG. 11, for example.

  After step S1510 ends, the series of processing shown in FIG. 15 ends. In the above description, a series of processes based on the operation status of the process and the network status acquired at a certain timing has been described. However, when the operation status of the process and the network status are acquired at a plurality of timings (for example, periodically at a predetermined cycle), the process status and the network status at each timing are shown in FIG. A series of processes shown may be executed a plurality of times. Then, the second determination unit 213-2 identifies the determined process that is a server-specific process as a server-specific process at a predetermined number of times (for example, once) or more in a plurality of executions, and determines that the process is a server-specific process It is also possible to determine that a process whose number of times is less than a predetermined number is not a server-specific process.

  The Web server that has received the request from the terminal device establishes a connection with the application process on the AP server in accordance with the request content, and sends the request. Upon receiving the request, the AP server process creates a child process or thread. The number of child processes or threads generated at this time depends on the application, but one or more child processes or threads are generated. Therefore, the number of child processes of an AP server process that generates a child process in response to a request has a characteristic that the number of connections between the Web server and the AP server is equal to or greater. In addition, the number of threads of the AP server process that generates threads in response to requests has a characteristic that it is larger than the connection between the Web server and the AP server (because the number of threads is acquired as 1 before the thread is generated). ).

  In the identification method of this embodiment, for the AP server, a server-specific process is identified by comparing the number of connections with the number of child processes, or comparing the number of connections with the number of generated threads. Therefore, for example, it is possible to determine that a process in which the resource usage is accidentally increased at the timing of receiving a request is not a server-specific process, so that the determination accuracy is improved.

  Similarly to the above-described Web server, a process in which an execution file is stored in the same directory as the execution file of the specified server specific process or in a subordinate directory is also specified as a server specific process. As a result, the background process of the AP server can be specified, and the determination accuracy can be further improved.

  As in this embodiment, for the AP server, the server-specific process is specified by comparing the number of connections with the number of child processes, or comparing the number of connections with the number of generated threads. Therefore, a process determined as a server-specific process by at least one of comparison between the number of connections and the number of child processes or comparison between the number of connections and the number of generated threads may be a server-specific process. In addition, it is possible to specify the server-specific process of the AP server by only comparing either the number of connections and the number of child processes, or the number of connections and the number of threads created. By performing this process, the determination accuracy can be improved.

[Details of Step S1006]
FIG. 16 is a flowchart illustrating details of the process in step S1006 of FIG. The process of FIG. 16 is a process executed by the third determination unit 213-3 for a VM process whose server type is determined to be a DB server in this embodiment.

  In the series of processing of FIG. 16, first, the third determination unit 213-3 identifies a period during which the response performance of the DB server is degraded (step S1601). In the following description, a period in which the response performance of the DB server is reduced may be referred to as a response deterioration period, and a decrease in the response performance of the DB server may be described as a bottleneck.

  An outline of the method for identifying the response deterioration period of the DB server in this embodiment will be described. In the description, it is assumed that the aggregation control apparatus 300 acquires VM operation information, network information, and the like at a plurality of different timings, for example, at a constant period within a predetermined period. The response deterioration period is a period in which the response performance of the DB server is reduced in a predetermined period in which VM operation information, network information, and the like are acquired.

  When the response of the information processing system has not deteriorated, there is a characteristic that the ratio (transmission / reception ratio) between the data transmission amount and the data reception amount of the Web server in the information processing system is constant (however, when The ratio varies from system to system). In the following description, it is assumed that the transmission / reception ratio = data transmission amount / data reception amount.

  On the other hand, when the response performance of the information processing system is deteriorated, the transmission / reception ratio of the Web server is smaller than the ratio of the data transmission amount compared to the normal time. That is, the value of the transmission / reception ratio is smaller than that at the normal time. By using this characteristic, it is possible to identify a period in which the response of the information processing system is deteriorated based on the data transmission amount and the data reception amount of the Web server collected during a predetermined period.

  Furthermore, when the response performance of the information processing system has not deteriorated, there is a characteristic that the ratio of the number of connections between the servers is also constant. That is, when the number of connections between the terminal device and the Web server is A, the number of connections between the Web server and the AP server is B, and the number of connections between the AP server and the DB server is C, A: B: There is a characteristic that C is constant. On the other hand, when the response performance of the information processing system is deteriorated due to the DB server, as described above, the ratio of the data transmission amount is smaller than the normal ratio of the transmission / reception ratio of the Web server, and A: B : C is the same as in normal time, or only C has a characteristic that becomes larger than in normal time. Therefore, the response deterioration period of the DB server can be specified based on the transmission / reception ratio of the Web server and the ratio of the number of connections between the servers.

  Here, the normal transmission / reception ratio and the number of connections described above may be, for example, an average value of the transmission / reception ratio and the number of connections in a predetermined period in which operation information and network information are collected. Or it is good also as an average value of the transmission / reception ratio and the number of connections of the period which excluded the period of judgment whether it is a response deterioration period from the predetermined period.

  After step S1601, the third determination unit 213-3 selects one of the response deterioration periods specified in step S1601 (step S1602).

  The third determination unit 213-3 identifies the type of bottleneck for the response deterioration period selected in step S1602 (step S1603). In this embodiment, the type of bottleneck can also be said to be a cause of deterioration in the response performance of the DB server. For example, the third determination unit 213-3 specifies the type of bottleneck based on the resource usage status during the response deterioration period and the information stored in the bottleneck determination information storage unit 227 illustrated in FIG.

  FIG. 17 is a diagram illustrating an example of the bottleneck determination information storage unit 227. For example, the bottleneck determination information storage unit 227 stores a bottleneck type 2271, an overall resource trend 2272, and a process resource trend 2273.

  The bottleneck type 2271 is information indicating the type of bottleneck. For the bottleneck type 2271 shown in FIG. 17, “CPU” indicates that the bottleneck is caused by the CPU. “Storage (disk)” indicates a bottleneck caused by storage. Storage refers to storage means or a storage area that is allocated separately from the memory for the VM. For example, a part of the storage area of a storage device such as a hard disk drive (HDD) provided in the information processing apparatus 200 is allocated. It is a thing.

  “Exclusive control” indicates a bottleneck caused by waiting for processing (lock) by exclusive control in accessing the database. “Network” indicates a bottleneck due to network delay or congestion used when the VM of the DB server communicates with other VMs. In the present embodiment, the bottleneck type, that is, the cause of the deterioration of the response performance of the DB server can be classified into four as shown in FIG.

  The overall resource trend 2272 is information indicating a trend of the resource usage status of the entire VM during the response deterioration period for each bottleneck type.

  The process resource trend 2273 is information indicating a trend of the resource usage status of the server-specific process during the response deterioration period for each bottleneck type.

  The process of step S1603 will be described with reference to FIG. 17. The third determination unit 213-3 identifies the usage status of resources of the entire VM during the response deterioration period. Specifically, for example, the third determination unit 213-3 determines whether the usage amount of each resource of the entire VM in the response deterioration period corresponds to “low”, “no variation”, or “high”. To do. The specific determination of “low”, “no variation”, and “high” is, for example, that the usage amount of each resource of the entire VM in the response deterioration period is a predetermined threshold value with respect to the average usage amount of each resource of the entire VM. If it is greater than this, it may be determined as “high”. Further, when the usage amount of each resource of the entire VM in the response deterioration period is smaller than the average usage amount of each resource of the entire VM, it may be determined as “low”. If neither “high” nor “low” is determined, “no variation” may be determined.

  After identifying the usage status of each resource of the entire VM in the response deterioration period, the third determining unit 213-3 matches the usage status of each resource of the identified VM with any of the overall resource trends 2272 shown in FIG. Judge whether to do. Then, the third determination unit 213-3 specifies the bottleneck type 2271 associated with the overall resource tendency determined to match as the bottleneck type corresponding to the target response deterioration period.

  After executing step S1603, the third determination unit 213-3 identifies a server specific process from among the processes in the VM of the DB server based on the bottleneck type identified in step S1603 (step S1604). A specific example of processing in step S1604 will be described with reference to FIG. 17 again.

  First, the third determination unit 213-3 identifies the resource usage status for the process of the target VM (DB server). Specifically, for example, the third determination unit 213-3 determines whether the usage amount of each resource for each process in the response deterioration period corresponds to “low”, “no variation”, or “high”. To do. Specific determinations of “low”, “no variation”, and “high” may be the same as, for example, the above-described resource usage status of the entire VM.

  The third determination unit 213-3 determines whether or not the usage amount of each resource for each process matches the process resource tendency 2273 associated with the bottleneck type specified in step S1603. The third determination unit 213-3 determines that a process in which the usage amount of each resource matches the process resource tendency 2273 associated with the bottleneck type specified in step S1603 is a server-specific process. On the other hand, the third determination unit 213-3 determines that a process in which the usage amount of each resource does not match the process resource tendency 2273 associated with the bottleneck type specified in step S1603 is not a server specific process.

  In step S1603 and step S1604, the usage amount of each resource for each process is obtained from information stored in the operation information storage unit 221, the disk access information storage unit 225, and the transmission / reception amount information storage unit 226 for the process of the DB server, for example. Can be calculated. Further, the usage amount of each resource of the entire VM can be the total usage amount of the DB server process for each resource. In addition, the average usage amount may be, for example, an average value of usage amounts of each resource in a predetermined period, or may be an average value of usage amounts of each resource in a predetermined period excluding data acquired at a determination target timing. Moreover, about the threshold value used as a criterion, for example, a ratio (percentage) with respect to the average usage amount or a numerical difference can be used. Note that the threshold value may be changed as appropriate for each resource type and for each determination of “high” or “low”.

  After executing the process of step S1604, the third determination unit 213-3 determines whether all response deterioration periods have been selected in step S1602 (step S1605). If it is determined that all the response deterioration periods have not been selected (step S1605, NO), the process returns to step S1602, and the third determination unit 213-3 selects one unselected response deterioration period, and step S1603. The process of S1605 is repeated.

  When it is determined that all the response deterioration periods have been selected (step S1605, YES), the third determination unit 213-3 performs an additional specifying process of the server specific process (step S1606). The process in step S1606 may be the same as the additional specifying process described as step S1109 in FIG. 11, for example. After step S1606 ends, the series of processes shown in FIG. 16 ends.

  For access to the DB server, a data read request from the AP server to the database occupies most of the access. Therefore, the DB server is equipped with a memory having a larger capacity than that of, for example, a Web server or an AP server (assigned to the VM), and uses the memory as a cache. Even for read requests for the same data, depending on whether the requested data is stored in the cache, the load of resources (specifically, access to the disk in particular) varies from time to time.

  Also, the load of resources (specifically, access to the disk in particular) varies depending on the installed memory capacity. For example, if the memory capacity is called an in-memory database or the like that can store all the data of the database in a cache, disk access hardly occurs.

  Further, since the size of data requested to be read varies greatly from request to request, the CPU usage rate and the memory usage amount vary greatly from request to request.

  In addition, there is a case where the DB server has a function that operates by detecting the number of records in the database table or the number of deleted records. What kind of data read requests have been received in the past due to the influence of the function? Also, the CPU usage rate and the memory usage amount change.

  From the above matters, for the DB server, if the process behavior is simply monitored, the behavior is not consistent, and the specific server process is identified from the relationship between the request (number of connections) and the process behavior. It can be said that it is difficult.

  However, the DB server has a characteristic that, when the response of the DB server deteriorates, the lifetime of the process that processes the data read request becomes longer. Although the cause of the response deterioration is not uniform, as described in the present embodiment, it can be classified into far fewer patterns as compared with the above-described process behavior. Moreover, if the factor of response deterioration can be specified, the behavior of the server specific process according to the factor can be estimated.

  Therefore, as described above, in the present embodiment, the third determination unit 213-3 first identifies the response deterioration period and the response deterioration factor for the DB server. Then, by identifying a process that exhibits a behavior that matches the behavior of the server-specific process estimated based on the response deterioration factor, the third determination unit 213-3 can identify the server-specific process, and the determination accuracy is improves.

  Similarly to the above-described Web server, a process in which an execution file is stored in the same directory as the execution file of the specified server specific process or in a subordinate directory is also specified as a server specific process. As a result, the background process of the DB server can be specified, so that the determination accuracy can be further improved.

[Aggregation processing]
Using the determination result of the server specific process for each VM by the determination unit 213, the aggregation control unit 214 can execute server aggregation processing.

  FIG. 18 is a diagram illustrating an image in which the aggregation processing when the determination result of the server specific process according to the present embodiment is used and the above-described excessive estimation (comparative example) are compared. FIG. 18 shows an example of determining whether or not server consolidation is possible for two VMs each operating one server.

  A graph 1801 shows the transition of the resource usage in the first consolidation target VM. A graph 1802 shows the transition of resource usage in the second VM to be aggregated. In graphs 1801 and 1802, the resource usage by the server-specific process (indicated as “unique” in FIG. 18), the resource usage by processes other than the server-specific process (indicated as “non-unique” in FIG. 18), and the total The resource usage as a whole VM (indicated as “total” in FIG. 18) is shown.

  In the present embodiment, an example is used in which servers that operate on the second aggregation target VM are aggregated on the first aggregation target VM. However, the server aggregation processing may be, for example, server aggregation to the second aggregation target VM, or may be different from the first aggregation target VM and the second aggregation target VM. It is good also as consolidating to VM of. It is assumed that the threshold value in the graph is a threshold value that is a criterion for determining whether or not the operation performance of the server is affected when aggregation is performed. Note that the threshold value that is a criterion for determining whether or not there is an influence on the operation performance of the server is not uniquely limited, and is appropriately determined according to the aspect of the information processing system, the amount of resources allocated to the VM when the servers are aggregated, and the like. It can be determined and changed.

  A graph 1803 indicates the usage amount estimated as the resource usage amount when the servers are aggregated in each of the comparative example and the present embodiment.

  In the comparative example, a value obtained by simply adding the resource usage amounts of the VMs of the two VMs as a whole is used as the estimated usage amount without distinguishing between the server specific process and the processes other than the server specific process. In the comparative example, since there is a period in which the usage estimated as the resource usage when the servers are aggregated exceeds the threshold, it is determined that the servers cannot be aggregated.

  On the other hand, in this embodiment, the resource usage by the server specific process is added up for the two VMs. However, for processes other than the server-specific process, the resource usage for one device, not the two VMs, is added to the resource usage by the server-specific processes for two VMs, and calculated as an estimated usage. According to the present embodiment, since the usage amount estimated as the resource usage amount when the servers are aggregated does not exceed the threshold value, it is determined that the servers can be aggregated.

  That is, in the comparative example, even if it is determined that the server cannot be aggregated due to excessive estimation of the resource usage, in this embodiment, the excessive estimation of the resource usage is suppressed. It can be judged that the aggregation is possible.

  With the method described above, the aggregation control unit 214 may estimate the resource usage when server aggregation is performed for a plurality of VMs and determine whether server aggregation is possible.

  For example, the aggregation control unit 214 may display the identification information of a plurality of VMs that can be aggregated on the display unit 202. Further, the aggregation control unit 214 may determine whether or not server aggregation is possible for a plurality of VMs for which identification information is input by the input unit, and display the determination result on the display unit 202. good. Further, the aggregation control unit 214 may display information indicating whether or not each of the VM processes is a server specific process on the display unit 202, or in a manner as illustrated in FIG. The VM resource usage after server consolidation may be displayed on the display unit 202. Alternatively, the aggregation control unit 214 may execute server aggregation by transmitting an instruction to the information processing apparatus 200 to execute server aggregation for a plurality of VMs for which server aggregation is possible.

  When server consolidation is performed, a plurality of VMs having the same server type may be targeted for aggregation. If the server type is the same, even if server aggregation is performed, the behavior of processes other than the server specific process does not change, or it is considered to be less than when the server type is different. It is.

[Hardware configuration]
FIG. 19 is an example of a hardware configuration of the aggregation control device 300 in the present embodiment. In FIG. 19, an example of the hardware configuration of the aggregation control device 300 is shown, but the same configuration can be adopted for the information processing device 200 and the terminal device 400 as described later.

  The aggregation control device 300 is an information processing device including, for example, a CPU 1902, a memory 1903, a storage device 1904, a NIC 1905, a medium reading device 1906, an input device 1907, and a display device 1908, which are mutually connected via a bus 1901. .

  The CPU 1902 performs various operation controls in the central control apparatus 300. The memory 1903 and the storage device 1904 store programs for executing various processes described in this embodiment and various data used for various processes. The storage device 1904 is a storage medium such as an HDD or a Solid State Drive (SSD).

  The CPU 1902 may read out a program stored in the memory 1903 or the storage device 1904, execute processing, and control, thereby realizing the processing unit 210 and the functional units included in the processing unit 210 illustrated in FIG. 3A. Note that the CPU 1902 can be replaced with a hardware circuit such as a micro processing unit (MPU) or an application specific integrated circuit (ASIC). Each of the memory 1903 and the storage device 1904 can function as the storage unit 220 described in FIGS. 3A and 3B.

  The NIC 1905 is hardware used for data transmission / reception via a wired or wireless network. The NIC 1905 can function as the communication unit 203 under the control of the CPU 1902.

  The medium reading device 1906 is a device for reading data from a recording medium. For example, a disk drive that reads data stored in a disk medium such as a CD-ROM or DVD-ROM, or data stored in a memory card is read. A card slot to be read. Part or all of the data stored in the storage unit 220 described above may be stored in a recording medium that can be read using the medium reading device 1906.

  The input device 1907 is a device that accepts input and designation from the user. Examples of the input device 1907 include a keyboard, a mouse, and a touch pad. The display device 1908 displays various information under the control of the CPU 1902. The display device 1908 is, for example, a liquid crystal display.

  For example, the information processing apparatus 200 and the terminal apparatus 400 can employ the same hardware configuration as that of the aggregation control apparatus 300 illustrated in FIG. However, the specific hardware (model, performance, etc.) of the CPU, memory, storage device, NIC, medium reading device, input device, and display device is the information processing device 200, the central control device 300, and the terminal device 400, respectively. It doesn't matter. For example, the information processing apparatus 200 may be equipped with a CPU having a higher calculation capability than the central control apparatus 300 or the terminal apparatus 400 and a larger capacity memory.

  The information processing apparatus 200 may be, for example, one or a plurality of physical server apparatuses, and the information processing apparatus 200 in the present embodiment may be replaced with a data center including a plurality of computers. When the information processing apparatus 200 is replaced with a data center including a plurality of computers, the central control apparatus 300 may be realized using a part of the computer resources of the data center.

  Further, the terminal device 400 may be, for example, a personal computer (PC), a smartphone, a personal digital assistant (PDA), or the like. Note that in the case where the terminal device 400 is a smartphone, a PDA, or a tablet PC, a touch panel that includes the function of the input device 1907 and the function of the display device 1908 may be used.

[Summary]
As described above, according to the present embodiment, it is possible to determine whether a process operating on a VM is a specific software process (server specific process) or a specific software process. is there. By discriminating server specific processes, excessive estimation of resource usage when determining whether or not server aggregation is possible is suppressed. For this reason, it is possible to consolidate more servers within a range that does not adversely affect the operational performance of the servers after server consolidation. If a larger number of servers can be consolidated, the number of VMs operating on the information processing apparatus 200 can be further reduced, and the cost for operating VMs can be reduced. Also, in operation management in the information processing system, it is possible to reduce costs such as patch application processing to the OS that increase or decrease in accordance with the number of VMs.

  In this embodiment, various commands used for collecting information used to determine whether the process is a server-specific process are used in an OS such as UNIX (registered trademark) or Windows NT (registered trademark). Is a standard command. Therefore, it is not necessary to introduce an additional tool for collecting information on the server. This is an advantage when, for example, the introduction of an additional tool is not permitted in a contract with a user who is a system provider.

  In the case where the information processing apparatus 200 is a data center, in this embodiment, information used for determining whether the process is a server-specific process may be collected for stable operation of the system. is there. Therefore, there is an advantage that new information collection processing is not necessary for realizing the present embodiment, and it is easy to continuously collect information in the operation of the system.

  In the present embodiment, the server background process and the like can also be specified as a server-specific process based on the storage state of the process execution file in the directory, and the determination accuracy can be improved. This corresponds to the additional specific process of the server specific process described in the present embodiment. According to the inventor's study, for example, in the case of a DB server, about 30% of the resource usage by the server specific process is the usage by the background process.

  In this embodiment, the server types are classified into Web server, AP server, and DB server. However, for example, for a server in which a Web server and an AP server are integrated, the process determination process for the Web server, the process determination process for the AP server, and the determination unit 213 may be executed. Then, the determination unit 213 may identify a process determined as a server specific process by at least one of the process determination process for the Web server and the process determination process for the AP server as a server specific process.

200 Information processing device 300 Central control device 400 Terminal device 500 Network 201 Input unit 202 Display unit 203 Communication unit 210 Processing unit 220 Storage unit 1901 Bus 1902 CPU
1903 Memory 1904 Storage device 1905 NIC
1906 Medium reader 1907 Input device 1908 Display device

Claims (17)

On the computer,
Whether a specific process among a plurality of processes operating in a virtual machine in which server software is installed is a process generated by the server software or a process generated by software other than the server software, Based on the number of connections established for the virtual machine and the number of child processes or threads created by the particular process,
When it is determined that the specific process is a process generated by the server software, the plurality other than the specific process is stored based on information stored in a storage unit and indicating a relationship between the plurality of processes. Determining whether the process is a process generated by the server software or a process generated by software other than the server software.
A determination program characterized by causing a process to be executed. In the computer,
If the number of connections is equal to the number of child processes, the specific process is determined to be a process generated by the server software.
The determination program according to claim 1, wherein the process is executed. In the computer,
Determining the type of the server software;
When it is determined that the type of the server software is a web server, it is determined whether the specific process is a process generated by the server software or a process generated by software other than the server software Execute the process to
The determination program according to claim 2, wherein processing is executed. In the computer,
If the number of child processes is greater than or equal to the number of connections, the particular process is determined to be a process generated by the server software;
The determination program according to claim 1, wherein the process is executed. In the computer,
If the number of threads is greater than the number of connections, determine that the particular process is a process generated by the server software;
The determination program according to claim 1, wherein the process is executed. In the computer,
Determining the type of the server software;
When it is determined that the type of the server software is an application server, it is determined whether the specific process is a process generated by the server software or a process generated by software other than the server software Execute the process to
6. The determination program according to claim 4 or 5, wherein a process is executed.   The determination program according to claim 1, wherein the connection is a TCP connection. The information indicating the relationship between the plurality of processes is information indicating the storage location in the directory of the executable file corresponding to the plurality of processes,
In the computer,
Among the plurality of processes other than the specific process, the process execution file is stored in the same directory as the execution file of the specific process, or a directory under the directory in which the execution file of the specific process is stored. Determining that the process is a process generated by the server software.
The determination program according to claim 1, wherein a process is executed. In the computer,
Resource usage by the process generated by the server software in one or more other virtual machines on which the specific type of server software operates is added to resource usage on the first virtual machine on which the specific type of server software operates When the sum of the values is equal to or less than a predetermined threshold value, it is determined that the server software of the first virtual machine and the server software of the other machine can be operated in one virtual machine.
The determination program according to any one of claims 1 to 8, wherein: On the computer,
Obtain information that shows the resource usage status by multiple processes running on a virtual machine with server software installed,
Each of a plurality of states that can be indicated in resource usage status by the plurality of processes, each of the operation state of the virtual machine corresponding to each of the plurality of states, and a process generated by the server software in each of the operation states Based on the determination information associated with the information indicating the resource usage status, the operation state of the virtual machine corresponding to the acquired information indicating the usage status is identified,
For each of the plurality of processes, the server software associated with the operation state identified in the determination information as to whether the process is generated by the server software or a process generated by software other than the server software Judgment based on whether or not the resource usage by the process generated by
A determination program characterized by causing a process to be executed. In the computer,
Determining the type of the server software;
When it is determined that the type of the server software is a database server, the specifying process and the determining process are performed.
The determination program according to claim 10, wherein a process is executed. The virtual machine is a virtual machine on which a database server included in the information processing system operates,
In the computer,
The ratio of the data transmission amount to the data reception amount in the virtual machine on which the web server included in the information processing system operates during a specific period included in the predetermined period is greater than the average value of the ratios in the predetermined period. When it becomes smaller, it is determined that the specific period is a period in which the response performance of the information processing system has decreased,
When it is determined that the specific period is a period in which the response performance of the information processing system has deteriorated, based on the number of connections between a plurality of virtual machines included in the information processing system in the specific period, Determine whether the specific period is a period when the response performance of the virtual machine on which the database server operates is reduced,
When it is determined that the specific period is a period when the response performance of the virtual machine on which the database server operates is deteriorated, either the process generated by the server software or the process generated by software other than the server software Process to determine whether or not
The determination program according to claim 10, wherein a process is executed. In the computer,
When there is a process determined to be a process generated by the server software, the process is identified based on information indicating a relationship between the plurality of processes stored in the storage unit. Determining a process having a predetermined relationship with a process determined to be a process generated by the server software as a process generated by the server software;
The determination program according to any one of claims 10 to 12, wherein a process is executed. Computer
Whether a specific process among a plurality of processes operating in a virtual machine in which server software is installed is a process generated by the server software or a process generated by software other than the server software, Based on the number of connections established for the virtual machine and the number of child processes or threads created by the particular process,
When it is determined that the specific process is a process generated by the server software, the plurality other than the specific process is stored based on information stored in a storage unit and indicating a relationship between the plurality of processes. Determining whether the process is a process generated by the server software or a process generated by software other than the server software.
The determination method characterized by this. Whether a specific process among a plurality of processes operating in a virtual machine in which server software is installed is a process generated by the server software or a process generated by software other than the server software, A first determination unit for determining based on the number of connections established for the virtual machine and the number of child processes or threads generated by the specific process;
When it is determined that the specific process is a process generated by the server software, the plurality other than the specific process is stored based on information stored in a storage unit and indicating a relationship between the plurality of processes. A second determination unit that determines whether the process is a process generated by the server software or a process generated by software other than the server software;
A determination apparatus comprising: Computer
Obtain information that shows the resource usage status by multiple processes running on a virtual machine with server software installed,
Each of a plurality of states that can be indicated in resource usage status by the plurality of processes, each of the operation state of the virtual machine corresponding to each of the plurality of states, and a process generated by the server software in each of the operation states Based on the determination information associated with the information indicating the resource usage status, the operation state of the virtual machine corresponding to the acquired information indicating the usage status is identified,
For each of the plurality of processes, the server software associated with the operation state identified in the determination information as to whether the process is generated by the server software or a process generated by software other than the server software Judgment based on whether or not the resource usage by the process generated by
The determination method characterized by this. Computer
Obtain information that shows the resource usage status by multiple processes running on a virtual machine with server software installed,
Each of a plurality of states that can be indicated in resource usage status by the plurality of processes, each of the operation state of the virtual machine corresponding to each of the plurality of states, and a process generated by the server software in each of the operation states Based on determination information associated with information indicating the usage status of resources, a specifying unit that specifies the operating state of the virtual machine corresponding to the acquired information indicating the usage status;
For each of the plurality of processes, the server software associated with the operation state identified in the determination information as to whether the process is generated by the server software or a process generated by software other than the server software A determination unit that determines based on whether or not the resource usage by the process generated by
A determination apparatus comprising:

Images